Report fraud to your card issuer first, then to the Federal Trade Commission

The moment you notice unauthorized charges on your credit card, call the phone number on the back of your card or log into your online account to report it directly to your bank or credit card company. This is your fastest route and the one that stops the fraud from spreading. Your issuer has a legal obligation under the Fair Credit Billing Act to investigate and remove fraudulent charges within a specific timeframe — typically 30 to 90 days depending on the type of fraud.

After you report to your card issuer, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record that you can use if the fraud is part of a larger identity theft scheme. The FTC does not investigate individual cases, but the report gives you documentation and a recovery plan if you need it later.

If the fraud involved a data breach at a specific merchant or company, you can also report it to your state's attorney general office, though your card issuer's investigation is the priority.

Key Takeaways

  • Call your card issuer immediately using the number on the back of your card — do not use a number from an email or text, as those may be fraudulent.
  • Your issuer must investigate within 30 to 90 days and remove charges you dispute, though you may see a temporary credit while they work.
  • File a report at IdentityTheft.gov to create a federal record and receive a recovery plan if identity theft is involved.
  • You are not liable for fraudulent charges under federal law, but you must report them promptly to keep that protection.
  • Request a new card with a different number and monitor your account for at least 30 days after reporting.

What happens when you call your card issuer

When you contact your issuer, have your card number, the disputed charges, and the dates they appeared ready to share. The representative will ask you to confirm whether you made each charge and will document your dispute in the system. They will typically cancel your current card and issue a replacement with a new number within 7 to 10 business days.

Your issuer will place a temporary credit to your account for the disputed amount while they investigate — this is not a final decision, but it protects you from late fees or interest charges during the investigation. If the investigation finds the charges were indeed fraudulent, the temporary credit becomes permanent. If they determine the charges were authorized, they will remove the credit and you will owe the amount.

Ask your issuer whether the fraud appears to be card-present (someone used a physical copy of your card) or card-not-present (online or phone fraud). This tells you whether your card number alone was compromised or whether someone may have stolen your physical card or personal information.

Filing a report with the Federal Trade Commission

Go to IdentityTheft.gov and select "Report identity theft" to start the process. You will answer questions about what happened, when you discovered it, and what steps you have already taken. The FTC will generate an Identity Theft Report and a personalized recovery plan based on your situation.

The Identity Theft Report is a document you can show to creditors, banks, or collection agencies if fraudulent accounts are opened in your name. It carries legal weight — creditors must treat it as proof that you did not authorize the accounts. You can download the report immediately and keep copies for your records.

The recovery plan walks you through next steps: monitoring your credit reports, placing fraud alerts or security freezes, and checking for accounts opened without your permission. If the fraud is limited to your credit card and no new accounts were opened, you may not need all these steps, but the plan will tell you which ones apply to your situation.

Monitoring your credit reports and placing fraud alerts

After reporting fraud, check your credit reports from all three bureaus — Equifax, Experian, and TransUnion — at AnnualCreditReport.com, which is the official free source. Look for accounts you did not open, inquiries from creditors you did not contact, or personal information that is incorrect. Fraudsters sometimes use stolen information to open credit cards, loans, or utility accounts.

If you find unauthorized accounts or inquiries, contact the bureau that reported them and dispute the information in writing. You can also place a fraud alert with any one of the three bureaus, and they will notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts in your name. It lasts one year and is free to place.

If you believe your identity has been stolen beyond just the credit card fraud, consider a security freeze, which locks your credit file so no one can open new accounts without your permission. A freeze is free to place and remove, though it takes a few business days. You place it with each bureau separately through their websites.

Understanding your liability and protection

Under the Fair Credit Billing Act, you are not liable for unauthorized credit card charges if you report them. Your maximum liability is zero once you notify your issuer, even if the fraud happened weeks before you discovered it. This protection applies to credit cards; debit cards have different rules and higher liability if you wait to report.

Your issuer may ask you to sign an affidavit stating that you did not authorize the charges. This is a standard form and does not mean they doubt you — it is part of their investigation process. Sign it and return it promptly, as it helps them close the investigation faster.

If your card issuer refuses to remove fraudulent charges or claims you are liable, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) at ConsumerFinance.gov. The CFPB investigates complaints against banks and card issuers and can force them to correct errors.

What to do if fraud happens repeatedly or involves identity theft

If you see multiple fraudulent charges over time or if new accounts keep appearing in your name, this suggests identity theft beyond a single compromised card. In this case, file a police report in addition to your FTC report. You do not need to go to a police station — most departments allow you to file online or by phone. The police report gives you additional documentation if you need to dispute accounts with creditors or collection agencies.

Contact each creditor or collection agency that has opened a fraudulent account in your name and send them a copy of your Identity Theft Report and police report. Include a letter stating that the account was opened without your permission and ask them to close it and remove it from your credit report. Send these by certified mail so you have proof of delivery.

If the identity theft is ongoing, consider working with a credit monitoring service or an attorney who specializes in identity theft. These are not free, but they can handle disputes with multiple creditors and help you rebuild your credit if damage has been done.

Preventing fraud on future cards

After fraud happens, take steps to reduce the risk of it happening again. Enable transaction alerts on your card so you receive a notification (email or text) each time a charge is made. Most issuers let you set alerts for charges over a certain amount or for all transactions.

Use your card's virtual card number feature if your issuer offers it — this generates a temporary card number for online purchases that is linked to your real account but cannot be reused. If the temporary number is compromised, the fraudster cannot use it again.

Check your statements weekly rather than monthly. The sooner you spot fraud, the sooner you can report it and limit your liability. Set a phone reminder if weekly checking does not come naturally to you.

Frequently Asked Questions

How long does it take to get my money back after I report fraud?

Your issuer must place a temporary credit within two billing cycles (usually 30 to 60 days). The investigation itself takes 30 to 90 days. If fraud is confirmed, the temporary credit stays. If the issuer determines the charges were authorized, they remove the credit and you owe the amount.

Can I use my card while fraud is being investigated?

Your old card will be canceled immediately, but your issuer will send a replacement card with a new number within 7 to 10 business days. You can use the new card right away. If you need access to credit before the new card arrives, ask your issuer about a temporary card number or emergency cash advance.

What if the fraud happened at a specific store or website?

Report it to your card issuer first — that is always the priority. You can also report the breach to the merchant's customer service and to your state's attorney general office. If the breach affected many people, the merchant may offer free credit monitoring, though your card issuer's fraud protection is your main defense.

Do I need to file a police report for credit card fraud?

A police report is not required for simple card fraud, but it becomes important if identity theft is involved — if accounts were opened in your name or if your personal information was stolen. For card-only fraud, your card issuer's investigation is usually enough.

Will fraud hurt my credit score?

Fraudulent charges themselves do not hurt your score because you are disputing them. However, if fraudsters opened new accounts in your name and those accounts show late payments or high balances, your score can drop. This is why monitoring your credit reports after fraud is important — you can dispute unauthorized accounts before they damage your score.